Skip to content

Actions: embeddedos-org/eBoot

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
417 workflow runs
417 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
CodeQL CodeQL #429: Scheduled
48s master
master
48s
fix(multicore): an AMP core starts only on an image that verified CodeQL #428: Pull request #146 opened by Kartikey1306
1m 23s Kartikey1306:fix/amp-starts-only-a-verified-image
Kartikey1306:fix/amp-starts-only-a-verified-image
1m 23s
ci: pin every action to a Node 24 major, by commit SHA CodeQL #427: Pull request #144 opened by Kartikey1306
1m 13s Kartikey1306:ci/actions-node24
Kartikey1306:ci/actions-node24
1m 13s
fix(recovery): INFO sent three bytes of stack to whoever asked, and the client printed them as the flash size CodeQL #426: Pull request #139 synchronize by Kartikey1306
1m 13s Kartikey1306:fix/recovery-info-leaks-stack-padding
Kartikey1306:fix/recovery-info-leaks-stack-padding
1m 13s
fix(recovery): INFO sent three bytes of stack to whoever asked, and the client printed them as the flash size CodeQL #425: Pull request #139 synchronize by Kartikey1306
1m 13s Kartikey1306:fix/recovery-info-leaks-stack-padding
Kartikey1306:fix/recovery-info-leaks-stack-padding
1m 13s
fix(sign_image): --genkey writes the key the build reads, not a header nothing includes CodeQL #424: Pull request #142 synchronize by Kartikey1306
1m 10s Kartikey1306:fix/genkey-emits-the-key-the-build-reads
Kartikey1306:fix/genkey-emits-the-key-the-build-reads
1m 10s
fix(stage1): give stage-1 an entry point, and refuse to verify an image that is not there CodeQL #423: Pull request #138 synchronize by Kartikey1306
1m 11s Kartikey1306:fix/stage1-image-is-not-empty
Kartikey1306:fix/stage1-image-is-not-empty
1m 11s
fix(sign_image): --genkey writes the key the build reads, not a header nothing includes CodeQL #422: Pull request #142 synchronize by Kartikey1306
1m 6s Kartikey1306:fix/genkey-emits-the-key-the-build-reads
Kartikey1306:fix/genkey-emits-the-key-the-build-reads
1m 6s
fix(stage0): refuse a stage-1 image the flash could not read CodeQL #421: Pull request #129 synchronize by Kartikey1306
1m 20s Kartikey1306:fix/stage0-checks-its-flash-reads
Kartikey1306:fix/stage0-checks-its-flash-reads
1m 20s
fix(sign_image): --genkey writes the key the build reads, not a header nothing includes CodeQL #420: Pull request #142 opened by Kartikey1306
1m 20s Kartikey1306:fix/genkey-emits-the-key-the-build-reads
Kartikey1306:fix/genkey-emits-the-key-the-build-reads
1m 20s
build: a Release build of a real board refuses to configure without a production trust anchor CodeQL #419: Pull request #122 synchronize by Kartikey1306
1m 3s Kartikey1306:fix/production-trust-anchor-is-structural
Kartikey1306:fix/production-trust-anchor-is-structural
1m 3s
build: drop EBLDR_REQUIRE_SIGNATURES and EBLDR_RECOVERY_AUTH, switches wired to nothing CodeQL #418: Pull request #133 synchronize by Kartikey1306
1m 10s Kartikey1306:build/security-options-wired-to-nothing
Kartikey1306:build/security-options-wired-to-nothing
1m 10s
ci(book): Eisvogel 3.5.1 for pandoc 3.6.1, and let the workflow test itself CodeQL #417: Pull request #135 synchronize by Kartikey1306
1m 21s Kartikey1306:ci/book-pdf-eisvogel-3
Kartikey1306:ci/book-pdf-eisvogel-3
1m 21s
build: drop EBLDR_REQUIRE_SIGNATURES and EBLDR_RECOVERY_AUTH, switches wired to nothing CodeQL #416: Pull request #133 synchronize by Kartikey1306
1m 14s Kartikey1306:build/security-options-wired-to-nothing
Kartikey1306:build/security-options-wired-to-nothing
1m 14s
build: drop EBLDR_REQUIRE_SIGNATURES and EBLDR_RECOVERY_AUTH, switches wired to nothing CodeQL #415: Pull request #133 synchronize by Kartikey1306
24s Kartikey1306:build/security-options-wired-to-nothing
Kartikey1306:build/security-options-wired-to-nothing
24s
ci(book): Eisvogel 3.5.1 for pandoc 3.6.1, and let the workflow test itself CodeQL #414: Pull request #135 synchronize by Kartikey1306
1m 7s Kartikey1306:ci/book-pdf-eisvogel-3
Kartikey1306:ci/book-pdf-eisvogel-3
1m 7s
fix(recovery): INFO sent three bytes of stack to whoever asked, and the client printed them as the flash size CodeQL #413: Pull request #139 opened by Kartikey1306
1m 14s Kartikey1306:fix/recovery-info-leaks-stack-padding
Kartikey1306:fix/recovery-info-leaks-stack-padding
1m 14s
fix(recovery): issue no challenge on a board without an entropy source CodeQL #412: Pull request #131 synchronize by Kartikey1306
1m 29s Kartikey1306:fix/recovery-challenge-needs-entropy
Kartikey1306:fix/recovery-challenge-needs-entropy
1m 29s
ci: grade only open pull requests against the linked-issue policy CodeQL #411: Pull request #125 synchronize by Kartikey1306
1m 21s Kartikey1306:ci/linked-issue-policy-open-only
Kartikey1306:ci/linked-issue-policy-open-only
1m 21s
fix(stage1): give stage-1 an entry point, and refuse to verify an image that is not there CodeQL #410: Pull request #138 synchronize by Kartikey1306
1m 4s Kartikey1306:fix/stage1-image-is-not-empty
Kartikey1306:fix/stage1-image-is-not-empty
1m 4s
fix(stage0): refuse a stage-1 image the flash could not read CodeQL #409: Pull request #129 synchronize by Kartikey1306
1m 20s Kartikey1306:fix/stage0-checks-its-flash-reads
Kartikey1306:fix/stage0-checks-its-flash-reads
1m 20s
fix(sha512): drop a carry term that is always zero CodeQL #408: Pull request #123 synchronize by Kartikey1306
1m 20s Kartikey1306:fix/sha512-dead-carry-term
Kartikey1306:fix/sha512-dead-carry-term
1m 20s
build: a Release build of a real board refuses to configure without a production trust anchor CodeQL #407: Pull request #122 synchronize by Kartikey1306
1m 21s Kartikey1306:fix/production-trust-anchor-is-structural
Kartikey1306:fix/production-trust-anchor-is-structural
1m 21s
fix(recovery): refuse an unprovisioned secret, and a write into an unmapped slot CodeQL #406: Pull request #127 synchronize by Kartikey1306
1m 7s Kartikey1306:fix/recovery-unprovisioned-secret-and-unmapped-slot
Kartikey1306:fix/recovery-unprovisioned-secret-and-unmapped-slot
1m 7s
fix(keystore): the compiled-in dev trust anchor was not a point on the curve CodeQL #405: Pull request #116 synchronize by Kartikey1306
1m 12s Kartikey1306:fix/dev-trust-anchor-is-not-a-point
Kartikey1306:fix/dev-trust-anchor-is-not-a-point
1m 12s